*.klarnaservices.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0d:9f:95:54:55:59:8e:d0:fd:0f:70:cd:99:77:f7:84 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.klarnaservices.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:9f:95:54:55:59:8e:d0:fd:0f:70:cd:99:77:f7:84Serial Number (int): 18108567906322033901741651802078050180
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: c9:d5:d7:eb:fb:18:7f:ee:af:99:ce:53:4a:8a:b7:14:00:f7:bd:a0
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 98:e8:1b:6f:77:1d:d8:cf:cd:54:ed:51:d4:33:99:cb:38:59:c2:0b
Fingerprint (sha256): 63:38:50:b7:3c:b4:1b:53:81:b0:2b:4c:54:33:20:b8:70:36:f1:2b:c0:b1:45:b1:dd:b4:ba:a1:90:92:66:cf
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate *.klarnaservices.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.klarnaservices.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.klarnaservices.com
Other certificates including the domain name klarnaservices.com
(limited to 100 certificates)
*.production.c2c.klarna.net
itp-images.playground.klarnaservices.com
*.production.c2c.klarna.net
*.production.c2c.klarna.net
production.eu1.kcpslackbot.influencer-platform.klarna.net
klarnaservices.production.eu1.osm.klarna.net
*.playground.c2c.klarna.net
staging.images.creator.klarnaservices.com
*.klarnaservices.com
itp-images.playground.klarnaservices.com
*.production.c2c.klarna.net
staging.images.creator.klarnaservices.com
*.klarnaservices.com
conversion-report.playground.klarnaservices.com
klarnaservices.production.us1.osm.klarna.net
*.production.c2c.klarna.net
klarnaservices.production.us1.osm.klarna.net
*.ads.klarnaservices.com
itp-images.klarnaservices.com
klarnaservices.staging.eu1.osm.klarna.net
*.production.c2c.klarna.net
*.production.c2c.klarna.net
*.klarnaservices.com
klarnaservices.production.eu1.osm.klarna.net
*.ads.klarnaservices.com
*.production.c2c.klarna.net
conversion.playground.klarnaservices.com
*.playground.klarnaservices.com
*.production.eu1.media-integrations.klarna.net
*.playground.c2c.klarna.net
*.klarnaservices.com
klarnaservices.production.us1.osm.klarna.net
conversion-report.playground.klarnaservices.com
klarnaservices.production.us1.osm.klarna.net
*.klarnaservices.com
*.production.c2c.klarna.net
*.klarnaservices.com
*.playground.klarnaservices.com
*.playground.us1.media-integrations.klarna.net
klarnaservices.production.eu1.osm.klarna.net
*.klarnaservices.com
*.ads.klarnaservices.com
*.production.c2c.klarna.net
*.production.us1.media-integrations.klarna.net
conversion-report.klarnaservices.com
*.production.eu1.media-integrations.klarna.net
*.playground.klarnaservices.com
staging.itp-images.klarnaservices.com
conversion-report.klarnaservices.com
*.playground.klarnaservices.com
*.playground.klarnaservices.com
conversion-report.klarnaservices.com
*.klarnaservices.com
ads.klarnaservices.com
klarnaservices.production.eu1.osm.klarna.net
*.playground.klarnaservices.com
klarnaservices.staging.eu1.osm.klarna.net
klarnaservices.production.us1.osm.klarna.net
*.ads.klarnaservices.com
staging.intercomhook.nonprod.us1.influencer-platform.klarna.net
*.production.c2c.klarna.net
klarnaservices.staging.us1.osm.klarna.net
*.production.us1.media-integrations.klarna.net
*.playground.c2c.klarna.net
itp-images.playground.klarnaservices.com
*.production.c2c.klarna.net
*.production.c2c.klarna.net
production.eu1.kcpslackbot.influencer-platform.klarna.net
klarnaservices.production.eu1.osm.klarna.net
*.playground.c2c.klarna.net
staging.images.creator.klarnaservices.com
*.klarnaservices.com
itp-images.playground.klarnaservices.com
*.production.c2c.klarna.net
staging.images.creator.klarnaservices.com
*.klarnaservices.com
conversion-report.playground.klarnaservices.com
klarnaservices.production.us1.osm.klarna.net
*.production.c2c.klarna.net
klarnaservices.production.us1.osm.klarna.net
*.ads.klarnaservices.com
itp-images.klarnaservices.com
klarnaservices.staging.eu1.osm.klarna.net
*.production.c2c.klarna.net
*.production.c2c.klarna.net
*.klarnaservices.com
klarnaservices.production.eu1.osm.klarna.net
*.ads.klarnaservices.com
*.production.c2c.klarna.net
conversion.playground.klarnaservices.com
*.playground.klarnaservices.com
*.production.eu1.media-integrations.klarna.net
*.playground.c2c.klarna.net
*.klarnaservices.com
klarnaservices.production.us1.osm.klarna.net
conversion-report.playground.klarnaservices.com
klarnaservices.production.us1.osm.klarna.net
*.klarnaservices.com
*.production.c2c.klarna.net
*.klarnaservices.com
*.playground.klarnaservices.com
*.playground.us1.media-integrations.klarna.net
klarnaservices.production.eu1.osm.klarna.net
*.klarnaservices.com
*.ads.klarnaservices.com
*.production.c2c.klarna.net
*.production.us1.media-integrations.klarna.net
conversion-report.klarnaservices.com
*.production.eu1.media-integrations.klarna.net
*.playground.klarnaservices.com
staging.itp-images.klarnaservices.com
conversion-report.klarnaservices.com
*.playground.klarnaservices.com
*.playground.klarnaservices.com
conversion-report.klarnaservices.com
*.klarnaservices.com
ads.klarnaservices.com
klarnaservices.production.eu1.osm.klarna.net
*.playground.klarnaservices.com
klarnaservices.staging.eu1.osm.klarna.net
klarnaservices.production.us1.osm.klarna.net
*.ads.klarnaservices.com
staging.intercomhook.nonprod.us1.influencer-platform.klarna.net
*.production.c2c.klarna.net
klarnaservices.staging.us1.osm.klarna.net
*.production.us1.media-integrations.klarna.net
*.playground.c2c.klarna.net
Certificate
The complete raw certificate details for *.klarnaservices.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIQDZ+VVFVZjtD9D3DNmXf3hDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDMyNjAwMDAwMFoXDTI0MDQyMzIzNTk1OVowHzEd MBsGA1UEAwwUKi5rbGFybmFzZXJ2aWNlcy5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuVU/zF6cnEbhJA+TnD1t2Ko9IOosNAXaV9e/CIxolYNiJ dTROpv67Tk8nUqQ1pz/kwGSqajtz13GuV6NlLY30S6lAPlSgk5+9jMNl3yesxB4w wvhwn4j0daBScj1NSdp1Z7l+u4EiaW1Y+9Lc8iLtpMZig9Riyj5ycIDN/JT3J/ph gBxtTOrkjQaJgfxCyhZPuNcR6grapii9tF3PAibxqDK6X0Nkl5wgEa3wJJ9DFTk0 GCikyv1mWDWONQ6k2d2R6gD0tOqAjkIrEDOTkWNte+rF6X9+CycebXYSZJ6anFnw 3+SAO2fZvBc8oAgAYl7qiwngUhCIEw+EPgu/m7F1AgMBAAGjggLtMIIC6TAfBgNV HSMEGDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUydXX6/sYf+6v mc5TSoq3FAD3vaAwHwYDVR0RBBgwFoIUKi5rbGFybmFzZXJ2aWNlcy5jb20wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV HR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9y Mm0wMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0G CCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYI KwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAx LmNlcjAMBgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDu zdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYccJ/3YAAAEAwBHMEUC IQDRjv6bNDDUoVf9XtRQ3ysGW2LZK5iBiexJdeo1+469/AIgCnR3SupjaZWgPMi8 5nyryLdjca+uN7vlRJehjbINWWUAdwBz2Z6JG0yWeKAgfUed5rLGHNBRXnEZKoxr gBB6wXdytQAAAYccJ/3sAAAEAwBIMEYCIQDwiHeZcKZJBw9rWAo/1Vtg0T3AexKx sKp5g/GCYFfkPwIhALd1ckG9D+ToppyCfDmIqZL2SM34hosIjSWWNIukf2sTAHUA SLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGHHCf9wQAABAMARjBE AiAwsZcJU8lOTNQSZ1U9418KgbFw51ptA8M4Pq3sn60QSgIgJ4po/XyMkZvxCv3L w/03cXTnr6HkaRR1pkHvuLPLR1QwDQYJKoZIhvcNAQELBQADggEBAMG27WrI1F1N E3UYTTm6uMo2qZo36JE6A4E9ytdvjGIcVAcHrioba3We56NAbzj9szVaQZOL39/8 XmEq+rsgx9hPL8iBHKapG+Xo1IyJAlWIGod2cW5msTelq1/ocTiZ3co5tb5Aaqcc VDiCUm0MiO/eqebae+PTkvRM3LcI37G7jKAeFrHHC1qIxy3GvQLxMszEJ1EYgapH Rvzi8Zi2C/N6WYzm8s1fekM6MipqMhHocXkEf4xHDypDX8luvclFcHTnzk3EEvm9 haAFK5f6egkj4tpwC3ljueyFH99rH4arEb0A8E0D6wfYcK+OvB0ibcA5ry3rtyK0 hcLfkTfBrro= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lVP8xenJxG4SQPk5w9b diqPSDqLDQF2lfXvwiMaJWDYiXU0Tqb+u05PJ1KkNac/5MBkqmo7c9dxrlejZS2N 9EupQD5UoJOfvYzDZd8nrMQeMML4cJ+I9HWgUnI9TUnadWe5fruBImltWPvS3PIi 7aTGYoPUYso+cnCAzfyU9yf6YYAcbUzq5I0GiYH8QsoWT7jXEeoK2qYovbRdzwIm 8agyul9DZJecIBGt8CSfQxU5NBgopMr9Zlg1jjUOpNndkeoA9LTqgI5CKxAzk5Fj bXvqxel/fgsnHm12EmSempxZ8N/kgDtn2bwXPKAIAGJe6osJ4FIQiBMPhD4Lv5ux dQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18108567906322033901741651802078050180 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.klarnaservices.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30086785646489229961531651724234275144995387924556266239865273964723135756995482085012756951457367618829901575449197272738964246591010971781755992159016958332383332341746359026040035882638306676822279195533588007740863745043877141636519347028449215338235789651956091894582650996719472977593833326171934190781496602910980445322529379464914117587356093397909803893791515335171723197514154174697484860341658736690834538800634923314844261815842144028463779159267681180070397578788774250515406195985823707994986423794611061246783379183357739307902498244182664375532426421492401430610691987234453153079455952504746810257781 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c9d5d7ebfb187feeaf99ce534a8ab71400f7bda0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klarnaservices.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001871c27fdd80000040300473045022100d18efe9b3430d4a157fd5ed450df2b065b62d92b988189ec4975ea35fb8ebdfc02200a74774aea636995a03cc8bce67cabc8b76371afae37bbe54497a18db20d596500770073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b5000001871c27fdec0000040300483046022100f088779970a649070f6b580a3fd55b60d13dc07b12b1b0aa7983f1826057e43f022100b7757241bd0fe4e8a69c827c3988a992f648cdf8868b088d2596348ba47f6b1300750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001871c27fdc10000040300463044022030b1970953c94e4cd41267553de35f0a81b170e75a6d03c3383eadec9fad104a0220278a68fd7c8c919bf10afdcbc3fd377174e7afa1e4691475a641efb8b3cb4754 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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