blog.termius.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 09:00:15:65:92:89:5a:f6:14:de:d7:17:2f:bb:26:d9 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=blog.termius.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 09:00:15:65:92:89:5a:f6:14:de:d7:17:2f:bb:26:d9Serial Number (int): 11963485940061197305501223834284140249
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: e0:4f:0f:5b:bb:b1:5f:6f:f9:16:4d:f1:e9:ad:f4:0d:8b:c0:e1:98
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 3b:c9:22:e7:a5:39:29:b9:c0:f0:9a:ac:f0:1c:8d:77:d2:6b:10:62
Fingerprint (sha256): 6e:8a:8c:78:b8:80:e1:8a:ba:90:bd:06:fc:c7:f6:b6:d3:9e:b9:7c:ef:c0:4e:17:ed:4a:3e:95:1a:b6:10:6e
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate blog.termius.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for blog.termius.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blog.termius.com
Other certificates including the domain name termius.com
(limited to 100 certificates)
api.termius.com
termius.com
api.dev.termius.com
support.termius.com
api.termius.com
termius.com
api.termius.com
docs.termius.com
webhook.api.termius.com
ceabnar.com
arisepod.betsol.com
*.dev.termius.com
www.lucavisciola.com
termius.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
api.termius.com
arisepod.betsol.com
arisepod.betsol.com
migration-status.transplantconnect.com
arisepod.betsol.com
cdn.termius.com
migration-status.transplantconnect.com
dev.serverauditor.com
*.termius.com
dev.termius.com
api.termius.com
docs.termius.com
api.dev.termius.com
api.dev.termius.com
support.termius.com
migration-status.transplantconnect.com
deb.termius.com
migration-status.transplantconnect.com
account.termius.com
*.termius.com
arisepod.betsol.com
termius.com
cerealsbank.com
arisepod.betsol.com
api.dev.termius.com
*.account.termius.com
migration-status.transplantconnect.com
api.termius.com
api.dev.termius.com
migration-status.transplantconnect.com
security.termius.com
dev.account.termius.com
docs.termius.com
cdn.termius.com
api.202576c5dc6a55ad30cc72fcf23e6048f0356c347f.termius.com
api.termius.com
customer.termius.com
blog.termius.com
webhook.api.termius.com
migration-status.transplantconnect.com
cdn.termius.com
dev.termius.com
arisepod.betsol.com
docs.termius.com
cdn.termius.com
api.dev.termius.com
demos.account.termius.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
webhook.api.termius.com
status.termius.com
termius.com
api-status.360cities.net
migration-status.transplantconnect.com
termius.com
5revive.com
migration-status.transplantconnect.com
termius.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
dev.termius.com
termius.com
www.termius.com
api.dev.termius.com
grpc.termius.com
account.termius.com
docs.termius.com
status.termius.com
*.api.termius.com
api-status.360cities.net
blog.termius.com
migration-status.transplantconnect.com
api.termius.com
blog.termius.com
dev.termius.com
blog.termius.com
api.dev.termius.com
www.termius.com
termius.com
api.termius.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
termius.com
api.dev.termius.com
support.termius.com
api.termius.com
termius.com
api.termius.com
docs.termius.com
webhook.api.termius.com
ceabnar.com
arisepod.betsol.com
*.dev.termius.com
www.lucavisciola.com
termius.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
api.termius.com
arisepod.betsol.com
arisepod.betsol.com
migration-status.transplantconnect.com
arisepod.betsol.com
cdn.termius.com
migration-status.transplantconnect.com
dev.serverauditor.com
*.termius.com
dev.termius.com
api.termius.com
docs.termius.com
api.dev.termius.com
api.dev.termius.com
support.termius.com
migration-status.transplantconnect.com
deb.termius.com
migration-status.transplantconnect.com
account.termius.com
*.termius.com
arisepod.betsol.com
termius.com
cerealsbank.com
arisepod.betsol.com
api.dev.termius.com
*.account.termius.com
migration-status.transplantconnect.com
api.termius.com
api.dev.termius.com
migration-status.transplantconnect.com
security.termius.com
dev.account.termius.com
docs.termius.com
cdn.termius.com
api.202576c5dc6a55ad30cc72fcf23e6048f0356c347f.termius.com
api.termius.com
customer.termius.com
blog.termius.com
webhook.api.termius.com
migration-status.transplantconnect.com
cdn.termius.com
dev.termius.com
arisepod.betsol.com
docs.termius.com
cdn.termius.com
api.dev.termius.com
demos.account.termius.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
webhook.api.termius.com
status.termius.com
termius.com
api-status.360cities.net
migration-status.transplantconnect.com
termius.com
5revive.com
migration-status.transplantconnect.com
termius.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
dev.termius.com
termius.com
www.termius.com
api.dev.termius.com
grpc.termius.com
account.termius.com
docs.termius.com
status.termius.com
*.api.termius.com
api-status.360cities.net
blog.termius.com
migration-status.transplantconnect.com
api.termius.com
blog.termius.com
dev.termius.com
blog.termius.com
api.dev.termius.com
www.termius.com
termius.com
api.termius.com
migration-status.transplantconnect.com
migration-status.transplantconnect.com
Certificate
The complete raw certificate details for blog.termius.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIQCQAVZZKJWvYU3tcXL7sm2TANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MDMxMTAwMDAwMFoXDTI1MDQxMDIzNTk1OVowGzEZ MBcGA1UEAxMQYmxvZy50ZXJtaXVzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALCtuoXky0Uv1ABdnhEyshND2kKH/rCGvy005uhFJSqNZooKJ3h0 bTjsjVdVT6Bfr/WWHO86pu5v0T/P5qqbk97Dd7ey34Ype61uDy/JWDJLKha0hiDq uWuHIIvld0WIZv8hh4FJHv4TDk/67qCyj8AX5zyRoPcg3x9UELdkHFFx2wRbQBVc DufRcYcjdUFEjYACNTqAJMmyozL6YSbQb9HoEZi/vF+bJn2ueEUXPtlxZLg1N8SG C6p+w0e9VEe+SLMbFcRLKQmxzsqA/GNU+SOQ+rwLv163z+qtkAHOsI+5zIp13uBk ZxEPFF6zOY5N3bvV4s7rSSBYW9PRfIXetYMCAwEAAaOCAugwggLkMB8GA1UdIwQY MBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBTgTw9bu7Ffb/kWTfHp rfQNi8DhmDAbBgNVHREEFDASghBibG9nLnRlcm1pdXMuY29tMBMGA1UdIAQMMAow CAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6 b250cnVzdC5jb20vcjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcw AYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAC hipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYD VR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHUATnWjJ1yaEMM4 W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGOKuMvxQAABAMARjBEAiAc/CMlR7RB DCsMxgMWWG31pJRzmnT7jVml6HnHnXUZgQIgAmOVapE5tbvno++qVmSK6liF6XM8 0+eggmQf9orvnGAAdgB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kOjC55uAAA AY4q4y+SAAAEAwBHMEUCIH+uIUM4Du2PlPjkDh61DeX3WVgS1EWXm4/1XHwWnqrD AiEA+674YEVCYwcvQV1VASg+HcBGj6Ny2Brjc/G3ES/G9KEAdgDm0jFjQHeMwRBB Btdxuc7B0kD2loSG+7qHMh39HjeOUAAAAY4q4y+3AAAEAwBHMEUCIEi+v/WQhS9S rJUUYpi6/8jkERNVQO62OMIpB991XznfAiEArUu2qm+XYTAfLAmJlizd/9N/XI/C g3AtbB0+wUjC1fEwDQYJKoZIhvcNAQELBQADggEBAIi2hUm0VNBRzM2kMWA2XHuZ ozxyCWOUVW1Wo15JiwvfAM0QPIvPFKzZPj+Ne2q5fhJ6iC3YPN9ftpPZVgmy5Y/V 1xovnHuXdp78g+CNWfoQMZyGgoQPhBFQWfuvBkojpdwrvX+8xtX6A12NM7KdT03I lHjFLG9SmxexWuiFVpt+8SlmymM7aODCJKZPFJz2/Kchsgplkotrope1vd82PEpy eEMo8YowGsmSfNKIMijMupRxKl9MAq/09GUlly7apoWnlUH53VYf2vEKGnoRUMvz 5ueG4o89JcFDnSTVFvQC1x9W3C6upFjS0T1Y5Q8u2soso2we/Aj98rRAIw1T4rw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK26heTLRS/UAF2eETKy E0PaQof+sIa/LTTm6EUlKo1migoneHRtOOyNV1VPoF+v9ZYc7zqm7m/RP8/mqpuT 3sN3t7Lfhil7rW4PL8lYMksqFrSGIOq5a4cgi+V3RYhm/yGHgUke/hMOT/ruoLKP wBfnPJGg9yDfH1QQt2QcUXHbBFtAFVwO59FxhyN1QUSNgAI1OoAkybKjMvphJtBv 0egRmL+8X5smfa54RRc+2XFkuDU3xIYLqn7DR71UR75IsxsVxEspCbHOyoD8Y1T5 I5D6vAu/XrfP6q2QAc6wj7nMinXe4GRnEQ8UXrM5jk3du9XizutJIFhb09F8hd61 gwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11963485940061197305501223834284140249 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-10 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.termius.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22303610442344767054488426778875825169513754208300742436894127076297236826778693491456485236389573391756016648410232273325056932670484198720479611262836787769365259994386300027973608650356645671467865665846127076212770163743857026070356811767926979133999571668246761102559021162986387087542558115651629465445301763164379081873720292299708705927121969941283551080429148901198155763975089306233778855821301873449109599474731548584721866173935583827992055935851545990236983188276599046992901036618575066469594191215061596656177565723973272292607911875226698555994993596326142642150930515651843940522411049312602350859651 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e04f0f5bbbb15f6ff9164df1e9adf40d8bc0e198 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.termius.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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